$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa File: aa48523e-152e-352b-93ab-2b9702c9a66c.roa (raw, json) Hash identifier: HhiVoyZey87dFAUVSGPUIo+ZyCipI8EN7Y90lGI7U/I= Subject key identifier: 1E:FA:56:9F:3C:61:4E:45:7C:8E:5A:65:08:E3:57:73:A5:38:E1:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79A713ED684D8331F4A0D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 108.170.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:71:3e:d6:84:d8:33:1f:4a:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1af5e90d-989b-4e47-80f7-d1d16261ee17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b4:1f:19:ad:83:39:9a:97:4e:00:dd:2a:68: c7:16:fd:4d:4c:eb:27:7c:28:b3:e0:1a:ab:e9:7a: 55:23:85:b8:f9:11:d5:2f:ee:14:43:c0:a6:a3:79: 40:08:78:34:b6:f4:de:ba:bc:9a:a9:a4:ae:62:50: 0b:b5:25:c0:72:bf:cc:6b:86:7d:74:d3:f8:37:3f: 0d:11:8f:41:33:ff:4e:65:d7:9b:7f:9e:7c:65:e0: 42:24:28:0e:1c:32:cc:38:b2:2c:dc:ab:0a:ab:62: ce:5c:ec:70:11:b3:38:0a:20:39:28:a1:e2:b0:4a: e3:ff:b1:7c:5e:13:89:37:c3:e7:66:e5:94:ee:0e: 2b:7a:29:6f:50:55:05:2d:84:8b:51:2c:f3:d4:c0: b4:12:5d:2a:8b:e8:1c:63:f6:f6:71:62:ba:b7:2d: 11:1b:0f:79:88:b7:3f:b1:85:6e:9a:41:a1:2b:83: df:6d:5e:eb:27:19:fa:e4:71:b2:02:2b:b7:32:7c: 3d:ef:60:ab:0a:57:d5:cc:59:05:72:98:aa:6e:6d: eb:98:11:ad:6d:c5:66:c4:9e:d8:c5:99:85:fa:f8: 0a:91:69:fa:8a:d4:52:41:04:dc:4f:82:d3:d7:34: 19:8a:2b:95:15:4b:90:25:98:04:f1:7c:5c:d5:45: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FA:56:9F:3C:61:4E:45:7C:8E:5A:65:08:E3:57:73:A5:38:E1:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c8:d6:bc:a1:79:1f:08:e3:14:30:88:ff:84:81:29:81:12: 1c:90:a0:87:ca:cd:c5:6e:ae:c8:88:09:9b:89:be:69:1f:93: 3c:db:45:1d:1d:98:6f:68:59:76:b6:ef:41:12:d0:69:2f:06: 69:5c:2e:68:94:9e:98:c7:64:fb:cf:79:c8:14:c4:b5:6e:0d: 1d:80:4c:fb:78:22:e5:df:e5:a3:16:45:02:d9:b4:75:f6:a7: 2d:79:4d:48:94:58:e6:c3:07:df:e1:f9:9f:7d:d8:13:7f:e7: 86:1c:e7:02:9e:61:94:06:12:31:f2:c4:87:50:f7:66:52:39: 79:56:8a:48:ad:ca:83:51:36:34:8e:b9:2e:70:31:fb:fd:23: a7:3c:fc:95:d1:b6:82:60:d0:3c:07:ca:d9:54:3d:23:a7:1b: ce:98:d3:54:1b:48:5c:03:80:65:b7:37:01:e9:c0:cc:4c:0c: 5e:2f:e7:bd:7f:60:03:f4:c6:b2:d0:a1:b6:1d:bb:35:56:3b: 85:98:63:66:a7:e9:bb:ad:16:66:b2:37:16:82:f7:b2:3f:d7: 51:03:a6:05:8b:f6:07:04:9d:23:05:14:3d:98:31:fd:8a:03: a0:7c:08:da:0a:65:57:d7:a9:7d:84:22:fe:6c:7e:ac:6d:f2: d6:93:e1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmnE+1oTYMx9KDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWFmNWU5MGQtOTg5Yi00ZTQ3LTgwZjctZDFkMTYyNjFlZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbQfGa2DOZqXTgDdKmjHFv1NTOsnfCiz4Bqr 6XpVI4W4+RHVL+4UQ8Cmo3lACHg0tvTeuryaqaSuYlALtSXAcr/Ma4Z9dNP4Nz8N EY9BM/9OZdebf558ZeBCJCgOHDLMOLIs3KsKq2LOXOxwEbM4CiA5KKHisErj/7F8 XhOJN8PnZuWU7g4reilvUFUFLYSLUSzz1MC0El0qi+gcY/b2cWK6ty0RGw95iLc/ sYVumkGhK4PfbV7rJxn65HGyAiu3Mnw972CrClfVzFkFcpiqbm3rmBGtbcVmxJ7Y xZmF+vgKkWn6itRSQQTcT4LT1zQZiiuVFUuQJZgE8Xxc1UVnzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB76Vp88YU5FfI5aZQjjV3OlOOENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE0ODUyM2UtMTUyZS0z NTJiLTkzYWItMmI5NzAyYzlhNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPI1ryheR8I4xQwiP+EgSmBEhyQoIfKzcVursiICZuJvmkfkzzbRR0d mG9oWXa270ES0GkvBmlcLmiUnpjHZPvPecgUxLVuDR2ATPt4IuXf5aMWRQLZtHX2 py15TUiUWObDB9/h+Z992BN/54Yc5wKeYZQGEjHyxIdQ92ZSOXlWikityoNRNjSO uS5wMfv9I6c8/JXRtoJg0DwHytlUPSOnG86Y01QbSFwDgGW3NwHpwMxMDF4v571/ YAP0xrLQobYduzVWO4WYY2an6butFmayNxaC97I/11EDpgWL9gcEnSMFFD2YMf2K A6B8CNoKZVfXqX2EIv5sfqxt8taT4e0= -----END CERTIFICATE-----Generated at Fri Aug 7 21:45:39 2026 by rpki-client